CVE-2022-43684
Estado: ModificadaMedia (6.5)—
ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality.
Additional Details
This issue is present in the following supported ServiceNow releases:
If this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls.
Detalles técnicos trazas, registros y código del informe original
* Quebec prior to Patch 10 Hot Fix 8b * Rome prior to Patch 10 Hot Fix 1 * San Diego prior to Patch 7 * Tokyo prior to Tokyo Patch 1; and * Utah prior to Utah General Availability
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.80%
- Percentil entre todas las CVEs puntuadas: 78
- Fecha de la puntuación: 9/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200
- CWE-668
Referencias
- http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html
- http://seclists.org/fulldisclosure/2023/Jul/11
- https://news.ycombinator.com/item?id=36638530
- https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1303489
- https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/
- http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html
- http://seclists.org/fulldisclosure/2023/Jul/11
- https://news.ycombinator.com/item?id=36638530
- https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1303489
- https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-43684",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-43684",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-01-02T20:40:28.652664Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@servicenow.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 9.9,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.1
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@servicenow.com",
"affectedData": [
{
"vendor": "ServiceNow",
"product": "Now Platform",
"versions": [
{
"status": "affected",
"version": "Quebec",
"lessThan": "Patch 10 Hot Fix 8b",
"versionType": "custom"
},
{
"status": "affected",
"version": "Rome",
"lessThan": "Patch 10 Hot Fix 1",
"versionType": "custom"
},
{
"status": "affected",
"version": "San Diego",
"lessThan": "Patch 7",
"versionType": "custom"
},
{
"status": "affected",
"version": "Tokyo",
"lessThan": "Tokyo Patch 1",
"versionType": "custom"
},
{
"status": "affected",
"version": "Utah",
"lessThan": "Utah General Availability (GA)",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-06-13T19:15:09.243",
"references": [
{
"url": "http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html",
"source": "psirt@servicenow.com"
},
{
"url": "http://seclists.org/fulldisclosure/2023/Jul/11",
"source": "psirt@servicenow.com"
},
{
"url": "https://news.ycombinator.com/item?id=36638530",
"source": "psirt@servicenow.com"
},
{
"url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1303489",
"tags": [
"Vendor Advisory"
],
"source": "psirt@servicenow.com"
},
{
"url": "https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/",
"source": "psirt@servicenow.com"
},
{
"url": "http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2023/Jul/11",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://news.ycombinator.com/item?id=36638530",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1303489",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@servicenow.com",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-668"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality.\n\n\n\nAdditional Details\n\nThis issue is present in the following supported ServiceNow releases: \n\n\n\n * Quebec prior to Patch 10 Hot Fix 8b\n * Rome prior to Patch 10 Hot Fix 1\n * San Diego prior to Patch 7\n * Tokyo prior to Tokyo Patch 1; and \n * Utah prior to Utah General Availability \n\n\n\n\nIf this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls."
}
],
"lastModified": "2026-06-17T05:07:06.893",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_1_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B349D86-36DF-46C1-A268-F9C5EBE80223"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8816E561-8E81-4C30-9C48-7836069202D9"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9AB04CB-F83E-4C6B-8F5E-9D317845D56E"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68E70794-77D1-4B96-B5B4-7E9624153D56"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "408EF715-7549-47B2-8F36-7D7C693C347D"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CE44A53-AF6C-488F-9163-7162955D9E21"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2B004A9-64C0-4279-AA1E-7CA2C4C9CAC0"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_2_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9992847C-D46A-4557-8E3E-3E15619C31DD"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_2_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DF72944-0771-4867-A9FF-EBAA25787FE4"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FDDA0D0-5010-4C07-A6C4-D6B2A873E348"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3AD962E-FCD3-490E-BD60-587227732B92"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_4_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10B1C7D9-E7A6-47FC-94B0-0C73E3C84F6A"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0FE839F-229A-459C-AEEB-AFE424764B72"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77BE7B49-D510-4D23-BB2A-A2C0FA31B3E9"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0D9D4EB-5113-4FC4-B4E1-2E081FE45CF4"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB5847EE-379F-48CD-AB5C-472582EEC9FB"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:quebec:patch_9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29725C9C-F01E-48D0-8AC6-EF4187B53461"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52C8A7D2-F930-4078-9E9D-E48782E46CBD"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "512C81E4-0C27-42EC-AD05-7563B50EF1DD"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B403376-993D-404D-B75B-A2B634095DD9"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5BBA03C-2A2E-4259-9F8E-99622F6758B7"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D609B90C-E67E-461A-8756-36E06E265FF0"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A05F1AF-0E08-4280-A006-A27C917C9E82"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E3198D2-CC9C-46F7-A366-6C16F3F35439"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAA82A56-93C2-47DC-92BA-D2EBF0C19EEC"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_2_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4FEEDD5-F852-49AA-BDF9-869040C7F3C4"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_2_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "763B0915-14EF-4405-AAB6-78B185D5744B"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B053530E-1CB3-4A86-BD4B-569750776A53"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_3_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CF1B2AB-D561-4396-AA99-71FCD55B5D3E"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00EE16EE-B759-4BD8-A30B-C952142C860E"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F157018-E6F2-45D1-8B54-68C051247798"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88603AEF-0EC2-4006-B7F2-E5FFAC8F354C"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB5BC2C0-A5CF-455F-A732-E49672B5682E"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66E9CCC4-7BC4-4FC2-8B54-B8746A83256C"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_5_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56E7DB16-6ABC-4ED3-99C1-A33914242405"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_5_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55AC0E29-0F51-4D1D-A5EF-AECD29FAE417"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DCC0D37-6840-4882-84E1-AE1E83ABF31B"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_6_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF53F785-2D19-48FB-9D88-9817785E5082"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_6_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EAAADE1-5804-44FB-BD9A-881BDA4FE1F0"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC20DB81-AA27-4BE5-9296-2E4E6000F56B"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_7_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DECC9979-3A0B-4F36-85D1-DD539A7D18C9"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_7a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563F3D85-A23A-453F-9932-3044F8B5566C"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_7b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C770579-EDDC-4F46-8288-33A13289A8A4"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78447698-90FF-4010-BF0B-3294E2EBB69B"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_8_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A32EF135-C229-49B1-8766-1ED6066C7CC8"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_8_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E5BA6F-6C66-4589-8AA9-C76776DCFCCB"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE93BECE-CC4A-400A-9322-5E61DA5E6A75"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_9_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38D3CF30-CAC5-49B1-B527-9C9D24C28A54"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_9a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C48A10D-0295-4023-AB20-0BE4D8AA582A"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:rome:patch_9b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F42AF52-C388-44BB-B328-5E77CF9E4622"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71A44062-D94F-4246-A218-33AD4C43C7FF"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A4ABAF4-C84B-4E7B-A156-24640B7D56EE"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2855AE65-1B96-4537-BB6E-7659114955EA"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63725CBE-34A5-4B9E-BA8E-32E66B89C646"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F249B02-DB97-4AFB-A786-AA685AA4E50B"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C143A667-EBF1-4F6D-AB21-833B184FBFF8"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD9C6C64-E92C-45A8-BC0C-71DE31F70D34"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C7C2818-6225-4652-B066-A11BD45D4608"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_2b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C46E8D6C-A65F-473B-AFCD-B16EA09023AB"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B2DC45C-17A0-4D92-AB29-3497DA43707E"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_2_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2822278-2089-4F78-86EE-D63A9516B5A5"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49444E5E-0AB7-4083-8663-089955134AA7"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B5E2C3D-F838-48E0-8135-455AF964221D"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2494C288-83E1-48DF-9661-540B26C9137E"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "815997A7-39CB-4C78-B776-54DECE294AA1"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE7FDD4B-163B-462A-A80C-454F5040FF90"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB55D9E6-FD9C-48A8-800D-10C665120792"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_4a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D481F300-EDF4-4E22-B865-F3AAFCE27692"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_4b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "311B0413-3771-4CAF-9A14-0726B2923A76"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E74913AB-25EE-4F18-B2FA-5C261D7ADE25"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C99222F-B676-471F-8E44-707024B2B097"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:tokyo:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4332BE18-DA60-4921-A9DF-C434AB32839B"
},
{
"criteria": "cpe:2.3:a:servicenow:servicenow:utah:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69E0078E-1953-4F4F-9D5A-B1A140C4B310"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@servicenow.com"
}